4-27
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 4 Configuring High Availability (HA)
Installing a Clean Access Server High Availability Pair
Configure the HA-Primary Clean Access Server
The general sequence to configure the HA-Primary CAS is as follows:
a. Access the HA-Primary CAS Directly, page 4-27
b. Configure the Host Information for the HA-Primary CAS, page 4-27
c. Configure HA-Primary Mode and Update, page 4-28
d. Configure the SSL Certificate, page 4-32
e. Reboot the HA-Primary CAS, page 4-33
f. Add the CAS to the CAM Using the Service IP, page 4-33
When done, continue to
Configure the HA-Secondary Clean Access Server, page 4-34
.
a. Access the HA-Primary CAS Directly
Each Clean Access Server has its own web admin console that allows configuration of certain limited
Administration settings directly on the CAS. The CAS direct access web console must be used to
configure CAS pairs for HA.
To access the HA-Primary Clean Access Server’s direct access web admin console:
1.
Open a web browser and type the IP address of the trusted (eth0) interface of the CAS in the
URL/address field, as follows:
https://<primary_CAS_eth0_IP_address>/admin
(for example,
https://172.16.1.2/admin
).
2.
Accept the temporary certificate and log in as user
admin
with the web console password specified
during initial configuration.
Note
•
In order to copy and paste values to/from configuration forms, Cisco recommends keeping both web
consoles open for each CAS (primary and secondary). See also
a. Access the HA-Secondary CAS
Directly, page 4-34
.
•
To ensure security, Cisco recommends changing the initial password of the CAS.
b. Configure the Host Information for the HA-Primary CAS
3.
Click the
Network Settings
link, then the
DNS
tab.
4.
In the
Host Name
field, type the host name for the HA-Primary CAS. Make sure there is a domain
in the
Host Domain
field, such as cisco.com. If necessary, add one and click
Update
.
Note
When configuring HA, it is mandatory to specify a Host Name for each machine in the HA-pair.
The Host Name is case-sensitive and cannot be an IP address. Host Names are needed later for
the
Local Host Name
and
Peer Host Name
fields of the HA Primary and HA Secondary
configuration. The
Local Host Name
and
Peer Host Name
do not need to be resolvable via
DNS; however, they are case-sensitive and need to match the Host Names you have specified for
the machines.
Содержание NAC-3310
Страница 8: ...Contents 6 Cisco NAC Appliance Hardware Installation Guide OL 20326 01 ...
Страница 172: ...A 4 Cisco NAC Appliance Hardware Installation Guide OL 20326 01 Appendix A Open Source License Acknowledgements Notices ...
Страница 176: ...Index IN 4 Cisco NAC Appliance Hardware Installation Guide OL 20326 01 ...
